Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53359: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role CVE-2026-53078: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops CVE-2026-46324: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks CVE-2026-45859: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | bpftool | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | bpftool-debuginfo | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-aarch64 | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-debuginfo-common-x86_64 | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-devel | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-headers | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-livepatch-6.1.176-221.367 | 1:1.0-0.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-modules-extra-common | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-tools | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-debuginfo | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | kernel-tools-devel | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | perf | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | perf-debuginfo | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | python3-perf | 1:6.1.176-221.367.amzn2023 |
| Amazon Linux · 2023 | python3-perf-debuginfo | 1:6.1.176-221.367.amzn2023 |
Vulnerabilities 4
-
High 8.8CVE-2026-53359 Public exploit
KVM: x86: Fix shadow paging use-after-free due to unexpected role
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad ("KVM: x86: Fix shadow paging use-after-free due to unexpected GFN") fixed a shadow paging mismatch betw…
-
High 7.8
netfilter: nf_tables: use list_del_rcu for netlink hooks
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netlink hooks nft_netdev_unregister_hooks and __nft_unregister_flowtable_net_hooks need to use list_del_rcu(), this list can be walked by concurrent…
-
High 7.8
bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops When a BPF sock_ops program accesses ctx fields with dst_reg == src_reg, the SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() ma…
-
High 7.5
netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation Ulrich reports a regression with nfqueue: If an application did not set the 'F_GSO' capability flag and a gso packe…